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REMARKS 

This response is submitted along with a request for a Request for Continued 
Examination (RCE) and a request for a three month extension of time. Previously, on 
December 15, 2005, Applicants filed a request for a one month extension of time and paid the 
requisite fee. Therefore, a fee covering the difference between the three month fee and the 
already paid one month fee is enclosed. 

Claims 1-19 were rejected under 35 U.S.C. § 102(e) as being anticipated by 
U.S. Patent Publication No. 2002/0012432 ("England"). By way of this amendment, 
Applicants canceled claims 1-19 and submit new claims 20-37. 

England generally describes a system for enforcing rights to protected digital 
content in which the digital content may be obtained over a public network such as the 
Internet. The rights are determined by a license, and a user's computing device 14 may 
obtain a license from a license server via the Internet. Similarly, the user's computing device 
14 may obtain encrypted content from a content server via the Internet. A digital rights 
management (DRM) system on the user's computing device 14 permits decryption of the 
protected content only if the user's computing device 14 also has obtained a license to use the 
content from the license server. The DRM system of England utilizes a "black box", which is 
obtained by the user's computing device 14 from a black box server. 

On the other hand, the claims of the present application are directed to a 
system that, in some implementations, may be less complex than the England system in that it 
may not require use of a license server, for example. Implementations of the claimed subject 
matter may be more appropriate for distributions and control of content within an 
organization as opposed to distributions over a public network. (Of course, in some 
implementations of the claimed subject matter, distribution may also occur via a public 
network such as the Internet.) As a result of the differences between the system of England 
and the claimed subject matter, England does not disclose the claimed combination of 
elements, as will be discussed in more detail below. 

New Claim 20 

Claim 20 is directed to a digital information security system. The system 
comprises, inter alia, "a user application tool installed in a user terminal, the user application 
tool being structured to create a unique user key using unique system information of the user 
terminal, to transmit the unique user key to a server system via a network for registration and 
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to subsequently transmit the unique user key to the server system via the network for 
authentication," "the server system comprising an encryption unit to encrypt digital 
information, a user information database to store the user information including the unique 
user key received from the user terminal for registration, a digital information database to 
store the encrypted digital information, a rule establishing unit to establish a rule 
corresponding to the user information and the digital information, a coupling unit to encrypt, 
using the unique user key, rule information corresponding to the rule, to encrypt, using the 
unique user key, a decryption key for decrypting the digital information, and to combine the 
encrypted rule information, the encrypted decryption key and the encrypted digital 
information into combined information, and a digital file database to store the combined 
information," and "the server system also comprising a server control unit including a user 
management tool to perform a user authentication process by comparing the unique user key 
stored in the user information database with the unique user key subsequently transmitted 
from the user terminal for authentication." Claim 20 also recites "wherein the server control 
unit transmits the combined information from the digital file database to the user application 
tool after completing the user authentication process, when the user terminal requests a 
download of the digital information." 

England describes a system for distributing encrypted digital content and 
allowing persons with rights to view the digital content to decrypt the content. The system 
includes an authoring tool 18, a content server 22, a license server 24, a black box server 26, 
and a user's computing device 14. The authoring tool 1 8 is used by a content owner to 
package a piece of digital content for use in the system. See England at par. 0048. The 
authoring tool 1 8 creates packages that include encrypted content. The content server 22 
downloads a package to a user's computing device 14 in response to a request from the user. 
See England at par. 0077, Fig. 1 . The user's computing device 14 includes a rendering 
application that conditionally renders digital content and a digital rights management (DRM) 
system. See id. at par. 0120, Fig. 4. When a user attempts to render encrypted content 
downloaded from the content server 22, the rendering application invokes the DRM system. 
See id. at par. 0120. The DRM system checks whether the user has a license to render the 
downloaded content. If the user does not, the DRM system may download a license from the 
license server 24. See id. at par. 001 1, Fig. 1. The license may include a decryption key to 
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enable the user computing device 14 to decrypt the digital content. See id. at par. 0012. The 
decryption key in the license is itself encrypted. See id. at par. 0017. A "black box" in the 
DRM system includes a public/private key pair. See id. at par. 0016. The license server 24 
uses the public key from the black box to encrypt the decryption key in the license, and the 
DRM system on the user's computing device 14 uses the private key from the black box to 
decrypt the decryption key in the license. See id. at par. 0017. The "black box" as well its 
public/private key pair is downloaded from the black box server 26 to the user's computing 
device 14. See id. at pars. 0016, 0178. 

England does not disclose or suggest "a user application tool installed in a user 
terminal, the user application tool being structured to create a unique user key using unique 
system information of the user terminal, to transmit the unique user key to a server system via 
a network for registration and to subsequently transmit the unique user key to the server 
system via the network for authentication," as recited in claim 20. 

In previous Office Actions, it appears to have been asserted that this element is 

disclosed alternately by the authoring tool 18 or the user's computing device 14 of England. 

With regard to the authoring tool 18, although England explains that the authoring tool 18 

uses keys, England discloses that the authoring tool 1 8 does not create the keys it uses. 

Namely, England discloses that the keys used by the authoring tool 1 8 are received by the 

authoring tool 18: 

The authoring tool 1 8 is a dynamic authoring tool 1 8 that receives 
: input parameters ... the input parameters are embodied in the form of a 
dictionary 28, as shown, where the dictionary 28 includes such 
parameters as . . . the encryption/decryption key to be employed. 

England at pars. 0062, 0065 (emphasis added). Thus, it cannot be said that England discloses 
that the authoring tool 1 8 creates the encryption/decryption keys it uses because England 
explains that the authoring tool 18 receives the encryption/decryption keys. 

Similarly, with regard to the user's computing device 14 of England, England 
explains that the user's computing device 14 uses keys, and that these keys are received by 
the user's computing device 14 from the license server 24 and the black box server 26. See 
id. at pars. 001 1, 0012, 0176, 0178. Thus, England makes clear that these keys are not 
created by something installed on the user's computing device 14. Because England explains 
that the various keys used by the user's computing device 14 are received from the license 
server 24 and the black box server 26, it cannot be said that the description of the user's 
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computing device 14 is a disclosure of "a user application tool installed in a user terminal, the 
user application tool being structured to create a unique user key using unique system 
information of the user terminal." 

Additionally, a previous Office Action asserted that "every CPU is capable of 
performing cryptographic functions, such as signing, encrypting, decrypting and 
authenticating. A CPU manufacturer equips a CPU with a pair of public and private keys that 
is unique to the CPU." Final Office Action dated 9/13/2005 at pp. 2-3. This discussion of 
CPU's is not disclosed in England, but it appears to come from somewhere outside of 
England. Moreover, England never describes the use of keys provided by a CPU 
manufacturer. Thus, it is unclear how this can be used to support the assertion that England 
shows "[t]he identical invention ... in as complete detail as is contained in the ... claim." 
Richardson, 9 U.S.P.Q.2d at 1920 (emphasis added); MPEP §2131. A rejection under 35 
U.S.C. § 102(e) requires the presence of a " single prior art disclosure of each and every 
element of a claimed invention." Lewmar Marine, Inc. v. Barient, lnc. y 827 F.2d 744, 747 
(Fed. Cir. 1987) (emphasis added). Further, if the Final Office Action is alleging that this 
information is somehow inherent in England, Applicants respectfully traverse that assertion. 

For the sake of argument, even if it were true that a CPU manufacturer equips 

every CPU with a pair of public and private keys, which is not admitted, England does not 

disclose that such keys are utilized in its system. For instance, England discloses that the 

keys used by the authoring tool 1 8 are received by the authoring tool 18: 

The authoring tool 1 8 is a dynamic authoring tool 1 8 that receives 
input parameters . . . the input parameters are embodied in the form of a 
dictionary 28, as shown, where the dictionary 28 includes such 
parameters as . . . the encryption/decryption key to be employed. 

England at pars. 0062, 0065 (emphasis added). Thus, it cannot be said that England discloses 
that the encryption/decryption keys used by the authoring tool 1 8 are a pair of public and 
private keys that were equipped in a CPU of the authoring tool 1 8 by a CPU manufacturer. 
Similarly, England explains that the keys used by the user's computing device 14 are 
received from the license server and the black box server. Thus, it cannot be said that 
England discloses that the keys used by the user's computing device 14 are a pair of public 
and private keys that were equipped in a CPU of the user's computing device 1 4 by a CPU 
manufacturer. 
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Additionally, the Final Office Action of September 13, 2005 stated that "the 
distinction as to location of key creation is not relevant." Final Office Action at p. 3. Thus, it 
appears that the Final Office Action essentially ignored the claim language " a user 
application tool installed in a user terminal ." But it is improper to ignore claim limitations 
when determining whether a reference anticipates. See MPEP §2131. To establish 
anticipation, "[t]he identical invention must be shown in as complete detail as is contained in 
the ... claim." Richardson v. Suzuki Motor Co., 9 U.S.P.Q.2d 1913, 1920 (Fed. Cir. 1989). 
See also, MPEP §2106 ("[W]hen evaluating the scope of a claim, every limitation in the 
claim must be considered. Office personnel may not dissect a claimed invention into discreet 
elements and then evaluate the elements in isolation . Instead, the claim as a whole must be 
considered.") (underlining in original); Diamond v. Diehr, 209 U.S.P.Q. 1, 9 (1981)("Tn 
determining the eligibility of respondents' claimed process for patent protection under 101, 
their claims must be considered as a whole. It is inappropriate to dissect the claims into old 
and new elements and then to ignore the presence of the old elements in the analysis.'"). 

Claim 20 also recites "the server system comprising ... a coupling unit to 
encrypt, using the unique user key, rule information corresponding to the rule, to encrypt, 
using the unique user key, a decryption key for decrypting the digital information, and to 
combine the encrypted rule information, the encrypted decryption key and the encrypted 
digital information into combined information, and a digital file database to store the 
combined information," and "wherein the server control unit transmits the combined 
information from the digital file database to the user application tool after completing the user 
authentication process, when the user terminal requests a download of the digital 
information." England does not disclose or suggest these elements. 

In England, encrypted content and the key for decrypting the content are not 
combined or distributed as "combined information" as recited in claim 20. For example, 
England explains that the encrypted content and an ED of the decryption key, but not the 
decryption key itself , are transmitted by the content server 22 as a "package." See Fig. 3; 
pars. 0081-0087. England also explains that the encrypted content is preferably distributed 
without regard for trust or security issues. See par. 0077. In the system of England, in order 
for the user's computing device 14 to decrypt the content, it must separately obtain a 
decryption key from the license server 24 as part of a license 16. See Fig. 8; pars. 0096, 
0164-0169. 
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New Claim 24 

Claim 24 is directed to a digital information security method. The method 
comprises, inter alia, "creating a unique user key using unique system information of a user 
terminal using a user application tool installed in a user terminal," "combining the encrypted 
digital information, the encrypted rule and the encrypted decryption key into combined 
information," and "transmitting the combined information from the server system to the user 
application tool via the network after completing the user authentication process, when the 
user terminal requests a download of the digital information." For reasons similar to those 
discussed above with respect to claim 20, England does not disclose or suggest these 
elements. 

Additionally, claim 24 recites "determining, with the user application tool, 
whether the digital file should be decrypted by determining whether the key used for 
encrypting the decryption key matches the unique user key created by the user application 
tool." Claim 24 earlier recites that the "user application tool" is "installed in a user terminal." 
England also does not disclose or suggest this element. 

As discussed above, in the system of England, the user's computing device 14 
obtains a decryption key from the license server 24 as part of the license 16. See Figs. 3, 8; 
pars. 0096, 0164-0169. The decryption key in the license 16 is itself encrypted with a black 
box public key. See par. 0185. The user's computing device 14 decrypts the decryption key 
in the license 16 using a black box private key. See par. 0185. The black box public/private 
key pair is transmitted to the user's computing device 14 from a black box server 26. See 
Figs. 3, 9, pars. 0176, 0178. England does not disclose or suggest that either of the black box 
public key or the black box private key is created by the user's computing device 14. At least 
for this reason, England does not disclose or suggest "determining whether the key used for 
encrypting the decryption key matches the unique user key created by the user application 
tool [installed in the user terminal]." 

New Claim 27 

Claim 27 is directed to a digital information encryption and upload method. 
The method comprises, inter alia, "creating a unique user key using unique system 
information of a user terminal using a user application tool installed in a user terminal," 
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"combining the encrypted decryption key, the encrypted digital information, and the 
encrypted rule into a combined file," and "storing the combined file." For reasons similar to 
those discussed above with respect to claim 20, England does not disclose or suggest these 
elements. 
New Claim 30 

Claim 30 recites an encrypted digital information download method. The 
method comprises, inter alia, "creating a unique user key using unique system information of 
a user terminal using a user application tool installed in a user terminal," and "decrypting, at 
the user terminal, the encrypted version of the digital information if the key used for 
encrypting the decryption key matches the unique user key created by the user application 
tool." For reasons similar to those discussed above with respect to claim 24, England does 
not disclose or suggest these elements. 

New Claim 33 

Claim 33 is directed to a digital information security method. The method 
comprises, inter alia, "combining into a file an encrypted version of the digital information, a 
decryption key for decrypting the encrypted version of the digital information, and a rule 
corresponding to the digital information, wherein the rule corresponding to the digital 
information includes authority of use of the digital information and includes authority of 
transfer indicating whether the one user system can transfer the digital information to another 
user system," and "transmitting the file from the digital information server to the one user 
system in response to the download request." For reasons similar to those discussed above 
with respect to claim 20, England does not disclose or suggest these elements. 

New Claim 33 

Claim 33 is directed to a digital information security method. The method 
comprises, inter alia, "combining into a file an encrypted version of the digital information, a 
decryption key for decrypting the encrypted version of the digital information, and a rule 
corresponding to the digital information, wherein the rule corresponding to the digital 
information includes authority of use of the digital information and includes authority of 
transfer indicating whether the one user system can transfer the digital information to another 
user system," and "transmitting the file from the digital information server to the one user 
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system in response to the download request." For reasons similar to those discussed above 
with respect to claim 20, England does not disclose or suggest these elements. 

Other Claims 

Claims 21-23 depend from claim 20. It is respectfully submitted that claims 
21-23 are allowable for the same reasons as claim 20, as well as for additional reasons. 

Claims 25 and 26 depend from claim 24. Applicants respectfully submit that 
claims 25 and 26 are allowable for the same reasons as claim 24, as well as for additional 
reasons. 

Claims 28 and 29 depend from claim 27. It is respectfully submitted that 
claims 28 and 2 are allowable for the same reasons as claim 27, as well as for additional 
reasons. 

Claims 31 and 32 depend from claim 30. Applicants respectfully submit that 
claims 31 and 32 are allowable for the same reasons as claim 30, as well as for additional 
reasons. 

Claims 34-37 depend from claim 33. It is respectfully submitted that claims 
34-37 are allowable for the same reasons as claim 33, as well as for additional reasons. 

Conclusion 

In view of the above amendments, applicant believes the pending application 
is in condition for allowance. 
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